VULNERABILITY INTELLIGENCE

CVE-2020-0128

CVSS score7.5 HIGH
EPSS probability0.80%
CISA KEVNot currently listed
Published2020-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919

Weakness classification

  • CWE-125: Out-of-bounds Read
  • CWE-190: Integer Overflow or Wraparound

Primary references